13937 matches found
CVE-2026-62136
Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...
CVE-2026-62135
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
CVE-2026-62132
Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...
CVE-2026-62114
Unauthenticated Broken Access Control in Passster = 4.3.13 versions...
CVE-2026-27378
Unauthenticated Broken Access Control in Deposits and Partial Payments for WooCommerce = 3.1.0 versions...
CVE-2026-81908
Concrete CMS 9.2.0 to 9.5.2 contain a missing authorization vulnerability in the REST API Groups list endpoint. The listGroups method in concrete/src/Api/Controller/Groups.php registers a permissions checker callback that unconditionally returns true, so no per-object tree node authorization is...
CVE-2026-62089 WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor allows Privilege Abuse. This issue affects Master Addons for Elementor: from n/a through 3.2.2...
CVE-2026-62089
CVE-2026-62089 is a Missing Authorization (Broken Access Control) vulnerability in the WordPress plugin Master Addons for Elementor by Pixar Labs, affecting versions from n/a through 3.2.2 . The flaw allows Privilege Abuse , enabling a low-privilege authenticated user to exploit the missing autho...
WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by TurboNexic in WordPress Plugin Master Addons for Elementor versions = 3.2.2...
CVE-2026-62136 WordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.21 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...
EUVD-2026-76201
Unauthenticated Broken Access Control in Flexible Quantity – Measurement Price Calculator for WooCommerce = 2.3.21 versions...
CVE-2026-62136
CVE-2026-62136 affects the WordPress plugin Flexible Quantity – Measurement Price Calculator for WooCommerce in versions
EUVD-2026-76202
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
CVE-2026-62135 WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
CVE-2026-62135
CVE-2026-62135 affects the WordPress Booktics plugin in versions ≤ 1.0.24 , introducing an unauthenticated Broken Access Control vulnerability. The flaw allows remote attackers with no prior access to modify data on the target site, resulting in a low integrity impact (CVSS 3.1: 5.3 MEDIUM , vect...
CVE-2026-62132
CVE-2026-62132 is a Broken Access Control vulnerability affecting the Masteriyo – LMS WordPress plugin in versions ≤ 3.4.0 . The flaw allows users with the Subscriber role to bypass access controls, resulting in a low integrity impact (CVSS 3.1 score: 5.3 MEDIUM ). The vulnerability was discovere...
EUVD-2026-76205
Subscriber Broken Access Control in Masteriyo - LMS = 3.4.0 versions...
CVE-2026-62114 WordPress Passster plugin <= 4.3.13 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Passster = 4.3.13 versions...
CVE-2026-62114
Unauthenticated Broken Access Control in the WordPress Passster plugin, affecting versions ≤ 4.3.13 . Discovered by Salúa Es-sair (via Patchstack), the flaw allows an unauthenticated attacker over the network with low complexity to achieve low confidentiality impact (CVSS 5.3 / MEDIUM). No integr...